The core Spam Checker plugin uses the session to make sure the user was on the post's page before submitting their comment (since most bots would not have visited the page before submitting their SPAM). Is the Spam Checker plugin activated along with Defensio?
If it is and Defensio is able to handle your SPAM well enough on its own, you might just want to deactivate the Spam Checker plugin. You could also try and adjust your PHP install's session timeout (that'd be the session.gc_maxlifetime INI value). That may or may not be an option, depending on your host and configuration. On Feb 7, 2011, at 5:55 PM, Mathias Schäfer wrote: > Hello fellow Habari users, > > I've got a problem with my Habari 0.6.6 installation. When readers > write a comment and submit the comment form, they sometimes get an > error message saying “Your session has expired”. The comment is lost > and doesn't even appear in the moderation queue which is very > annoying. > > My readers say the error occurs especially for longer comments that > took them some time to write (a couple of minutes I guess). I'm > assuming the single entry page sets a session cookie with a timestamp > and Habari compares the time difference when a comment is posted. Is > there a possibility to loosen this timeout or allow commenting without > sessions? By the way, the PHP session.cache_expire defaults to 180. > > I'm using the Defensio anti-spam plugin. Don't know if it has > something to do with that. My understanding is that Defensio just > sends the comment to a web service and gets a spam probability back > but doesn't do session checks. > > I've found a switch in the preferences, “Require Comment Author Info”. > Does this disable the need for a session or does it just toggle > whether the name and e-mail fields are mandatory? > > Thanks in advance. > > Regards > Mathias > > -- > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/habari-users -- To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/habari-users
